litkult1920er.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:e4:7d:08:77:b7:92:a4:e4:b2:00:2d:d4:67:18:98:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=litkult1920er.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:e4:7d:08:77:b7:92:a4:e4:b2:00:2d:d4:67:18:98:cd
Serial Number (int): 270828194894036597332923023820243311565005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:29:6d:70:02:c4:09:d4:8f:30:a9:06:ae:b9:9f:36:8d:bd:94:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:04:b2:cd:56:ae:48:18:1e:a0:c6:33:ec:1d:83:33:a4:3e:ae:85
Fingerprint (sha256): 0d:b4:b9:03:56:04:d0:d3:ec:85:6d:1a:b9:6b:89:b6:8f:91:cc:0b:b5:4f:a7:39:37:18:4d:a4:09:97:dc:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate litkult1920er.aau.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for litkult1920er.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

litkult1920er.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for litkult1920er.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270828194894036597332923023820243311565005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 03:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 03:31:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'litkult1920er.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766703819039106519477010577774271436878197513993957283021228911665402187853677476733648309691874665244596471366676453450895169013607815124125988919907076665846553358032878870565889004561598853318966820185270130339579036364142015548493381509320860763619027703030973481559987203398816427279404944440448151241352586104206251731786392474268823612779390484924412541695582569275030802453119728236560727408674576716611647510065615660713356170967398969628272266094290558223039034289799755728338021920754735130463634345736866828192936075335619635984885240256536192400467192393270084349622806595995026892828583199516243716719110607560230533475642330180221021610269414017901958270592990263172191489314598529963544628440290873519553539514473868517981356810765070350252783187104885731516294239638851846804937010717035807860932601428014562304239182083594527455785266857145346558918543032868339979197305385758420168641003830130249503337170765196765067797258446837074400925481927722880650033552977110997152214013487127686724046149461777529413662845096215891690560065795434198500219461922803581840163375663861558139182675760887237152154640639833464499342655588423787927533506939518510580694772676683888783820933369375088568399493148252049748153880263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af296d7002c409d48f30a906aeb99f368dbd94d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litkult1920er.aau.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e8c3b30640000040300463044022058a5bfae8d1a12f3681c22271f0e554598cb417877427852f23ecd7b9ac66351022001a7fb78d421eb3bec6ffa3a6713ac351b5857fbcd1f7d02d7fa694b4e5e85840076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e8c3b30b80000040300473045022100ebae12d82268224e28e525afb83c0e291e563f7e010ac95ff7954206f1975afb022009741bbb8283b1166b55c7849079c2556099d10d6e1fa6486b1fe2831accda3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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